SDMS PWS 17 Feb.docx

PERFORMANCE WORK STATEMENT

FOR

AIR FORCE RESERVE COMMAND

Software Development Maintenance Services (SDMS)

1.0. DESCRIPTION OF SERVICES.

1.1. Scope. This Performance-based Work Statement (PWS) describes the services required by the Directorate of Cyberspace and Technology at Headquarters Air Force Reserve Command (HQ AFRC/A6) to support the development, sustainment, maintenance, accreditation, documentation, and lifecycle management of IT Systems, software applications, services, and tools which support daily operations and enterprise solutions.

Scope includes support for the following services:

· Development of software or web applications to capture data.

· Sustainment of existing, planned, and future Enterprise Applications Branch (HQ AFRC A6BA) applications, services, and related software.

· Modernization of legacy applications.

· Maintenance and support of AFRC data warehouses, web services, and Application Programming Interface (API) development.

· Integration and sharing of AFRC data, and support of commercial-off-the-shelf business intelligence tools supporting data sharing.

· Assisting the government with cloud migration efforts.

· Working in and leading Agile scrum teams.

· Performing database administration and server administration functions.

· Providing customer support for Tier 0-IV.

· Ensure cyber security and cyber compliance requirements are met.

1.2. Organization. The AFRC organization with primary responsibility for this requirement is HQ AFRC/A6.

1.3. Place of Performance. These services will be performed at Headquarters Air Force Reserve Command at Robins Air Force Base (AFB) Georgia.

1.4. Required Services.

1.4.1. Software Development Maintenance Support (SDMS) Contract Program Manager Service. HQ AFRC/A6 requires full-time SDMS Contract Program Manager to be available onsite as requested and perform monthly site visits with HQ AFRC/A6BA in order to facilitate Government-Contractor communications and fulfill the overall performance of this contract. SDMS Contract Program Manager is expected to represent all Contractor interests to include any Subcontractors. In support of SDMS Contract Program Manager Service, Contractor shall provide the following services:

· Provide for the daily administration of the contract including, but not limited to, formulating and enforcing work standards; managing work schedules; communicating policies, objectives, and goals of the organization to all Contractor personnel; reviewing work discrepancies; ensuring sufficient coverage for services; and tracking Contractor compliance.

· Tracks Contractors 8570 training requirements.

· Completion of Non-Disclosure Agreement (NDA) and Privileged Access Agreement (PAA) by individual.

· Review User Requirements as presented through Business Capabilities Acquisition Cycle (BCAC).

· Maintain satisfactory contract performance and resolve issues timely.

· Notify the Contracting Officer Representative (COR) prior to implementing actions that will impact services’ deliveries.

· Meet project schedule milestones on-time delivery at or above 90% level. Milestone changes shall be approved by the Government. Late deliveries shall not be more than five (5) days late.

· Provide accurate and comprehensive Monthly Technical Summary (MTS), Monthly Financial Summary (MFS), and Software Build Plan within five (5) Calendar days prior to the end of each month with on-time delivery at 100% level.

· Coordinate with COR to resolve issues pertaining to Government-Contractor procedures and/or service deliveries.

· Ensure written minutes are prepared for meetings and all agreements made during meetings are documented.

· Ensure support is provided to all other meetings, working groups, etc.

· The contractor shall establish and maintain a configuration management process as prescribed by AF procedures and participate in a Configuration Control Board (CCB) meeting, which is chaired by the Government. The CCB will control changes to the software/hardware configuration and record and report change processing and implementation status.

· Use a requirements management process utilizing government designated configuration management tool (currently Team Foundation Server). Contractor shall advise the Government leads of requirements requiring immediate attention. Participate with Government personnel on a Requirements Review Panel to discuss and recommend prioritization of requirements as needed.

· Establish and maintain a metrics program to document, trend, perform analyses, and brief its performance to the Government. The Government will validate the metrics for acceptance. Any discrepancies to the metrics will be returned to the Contractor for correction and re-submitted to the Government for acceptance within five (5) business days. Expected metrics should include but are not limited to help desk report to show issues received, addressed, open tickets, closed tickets, server uptime stats, and web service calls.

· Ensure all contractor trip reports (for any travel performed in support of the contract) are submitted within five (5) business days of completion of the trip. This report shall be electronically delivered to the appropriate government POC(s) via email.

· Identify and report all program management actions in a Monthly Technical Summary Report (CDRL A001, Monthly Technical Summary Report, DI-MGMT-81928, PWS Appendix C) within five (5) calendar days prior to the end of each month. This report shall be electronically delivered to the COR and contain the following information:

· Brief description of requirements and tasks performed.

· Brief summary of accomplishments during the reporting period and events regarding the contract.

· Technical user support activity summary.

· Task schedules.

· Task performance metrics (STIGS, Help Desk Measurement, Vulnerability Metrics, Server Uptime).

· Task software quality metrics (Web Service Calls/API Calls, Web app usage stats, Issue tracker against systems).

· Provide New Technology Research Briefings and Reports in accordance with CDRL A002, New Technology Research Briefings and Reports, DI-MGMT-81928, PWS Appendix C.

· Identify and report financial management status in a Monthly Financial Summary Report (CDRL A003, Monthly Financial Summary Report (MFS), DI-MGMT-81651, PWS Appendix C) within five (5) calendar days prior to the end of each month. This report shall be electronically delivered to the COR via email and contain the following information:

· Billing summary for reimbursable costs [broken out for labor, training, travel, other direct costs (ODC)] during the reporting period.

· Vendor Labor Hour Expense/Burn Rates for reimbursable costs.

· Summary of associated travel completed.

· Summary of planned travel.

· Provide Software Build Plan in accordance with CDRL A004, Software Build Plan Report, DI-IPSC-82167, PWS Appendix C within five (5) calander days prior to the end of each month. Include the following reports in the Software Build Plan:

· Provide Functional Description Data (FDD) in accordance with CDRL A005, Functional Description Data, DI-IPSC-82360, PWS Appendix C.

· Provide Product Backlog CDRL A006, Product Backlog, DI-IPSC-82298, PWS Appendix C.

· Provide Product Roadmap in accordance with CDRL A007, Product Roadmap, DI-IPSC-82297, PWS Appendix C.

· Provide Software Vulnerability Assessment Reports (SVARS) in accordance with CDRL A008, Software Vulnerability Assessment Reports, DI-IPSC-82252A, PWS Appendix C.

· Identify and report Analysis of customer feedback from projects in a Biannual Customer Feedback Report. This report shall be electronically delivered to the COR and contain the following information:

· Customer feedback details per application.

· Analysis of feedback arranged by root cause analysis.

· Architect Cloud solutions/plans for both commercial and Mil-Cloud transitions.

1.4.1.1. Qualifications Required to Perform These Services:

· Five years or more of program management experience including handling or managing workforce of up to 20 personnel.

· Experience with liaison activity associated with various levels of management within DoD, or equivalent, including contracts.

· Experience in personnel management, strategic planning, risk management, change management.

· Experience performing mathematical and analytical functions required to capture and produce meaningful metrics.

· Technical knowledge regarding software development languages identified in Appendix 1, computers, systems, databases, general use software programs and office equipment.

1.4.2. SDMS Contract Business Systems Analyst Support Service. HQ AFRC/A6 NIPR/SIPR Business Systems and applications (Appendix 1) supported by the SDMS contract require business system analyst(s) for the supported business domain to document its processes and systems. Business system analyst(s) shall also be needed to outline business requirements and match the software business model with the software being built. Business system analyst(s) shall perform feasibility studies of new software requirements and technologies. Business system analyst(s) shall be required to liaison between the development team and the stakeholders. The business system analyst(s) shall be expected to interpret business requirements into understandable development tasks that provide expected business value to a final software product.

1.4.2.1. SDMS Contract Business Systems Analyst(s) are required to assist in determining software(s) value proposition and Key Performance Indicators (KPI). Business system analyst(s) shall also be required to plan software development activities, validate requirements, and assure a standardized software development process approved by the government is followed. In support of SDMS Contract Business System Analyst Support Service, Contractor shall provide the following services:

· Research Software Business Problems presented by HQ AFRC/A6BA customers and approved by the government.

· Determine software’s expected Business value.

· Identify and model process requirements.

· Identify and model data requirements.

· Identify business rules requirements.

· Ensure automated User Acceptance Tests align with requirement.

· Document functional and non-functional requirements via Functional Description Data in accordance with CDRL A005, Functional Description Data, DI-IPSC-82360, PWS Appendix C.

· Formulate Product Backlog in accordance with CDRL A006, Product Backlog, DI-IPSC-82298, PWS Appendix C.

· Ensure User Story documentation.

· Perform User Story quality control.

· Prioritize backlog based off business value with product owner input.

· Participate in preplanning and Sprint meeting to ensure Sprints are in line with approved requirements.

· Attend project Scrum meetings.

· Gather customer feedback.

· Work closely with HQ AFRC Enterprise Architecture.

· Lead projects through approved software lifecycle model as directed by the Government lead.

1.4.2.2. Qualifications Required to Perform These Services:

· Significant experience in Dev Ops and Agile Methodologies.

· Proficient in MS Office tools including Visio.

· Knowledge in Business Process Mapping and best practices.

· Technical experience working in a database environment.

1.4.3. SDMS Contract System Security and A&A Support

HQ AFRC A6 requires systems security and A&A services support for HQ AFRC Portfolio Systems and web applications belonging to HQ AFRC/A6BA. See (Appendix 1) for current list. The Contractor shall also be required to perform system security and A&A services for newly developed systems and applications owned by HQ AFRC/A6BA during the lifespan of the contract.

1.4.3.1. SDMS Contract Information System Security Manager Services (ISSM). The Contractor shall provide ISSM Services in support of AFRC Portfolio systems and web applications owned by HQ AFRC/A6BA. The list of current systems with their type are identified on (Appendix 1). The ISSM shall be required to perform A&A actions which consist of the creation and maintenance of the Risk Management Framework (RMF) package to achieve an Authority To Operate (ATO) for AFRC systems. These activities include complying with higher tiered ISSM Standard Operating Procedures (SOPs), ports, protocols and service request, hardware and software inventories, and controls. Approving access control requests. Conducting account reviews and provide vulnerability remediation for servers. In support of SDMS Contract Information System Security Manager Services, Contractor shall provide the following services:

· Serve as HQ AFRC/A6B Information Systems Security Manager (ISSM) for NIPRNet and SIPRNet applications RMF ATO packages for A&A with artifacts, controls, system categorization.

· Assist with software renewal packages sent thru the Air Force Software and Application Certification Assessment (SACA) process and other approved process to add software to an Air Force approved products list.

· Advise government program managers on security testing methodologies and processes.

· Participate in self-inspections; identify security discrepancies and report security incidents.

· Provide expert research and analysis in support of expanding programs and area of responsibility.

· Evaluate assessment documentation and provide written recommendations for authorization to government PM’s.

· Conduct annual security reviews of all IA controls and a test of selected IA controls in accordance with appropriate Laws, Rules, and Protocols (LRPs) set by DoD/Air Force specifications.

· Ensure that authorization is accomplished on each Automated Information System (AIS)

· Assist with transitioning ATO packages to a continuous ATO package.

· Comply with continuous monitoring – update asset/hardware/software inventory, upload vulnerability scan reports, POA&Ms, STIG checklists.

· Ensure POA&Ms are being accomplished for those items that are non-compliant.

· Responsible for reviewing POA&Ms periodically to ensure ECD is met, milestones documented.

· Assist with Ports, Protocols, and Service request for applications and systems maintained by HQ AFRC/A6BA.

· Ensure that security assessments are completed and documented.

· Review/update RMF plans annually

· Periodically review system security to accommodate changes to policy or technology

· Coordinate AIS security inspections, tests, and reviews

· Conduct periodic assessments of the security posture of the AIS

· Ensure Compliance with COMPUSEC Program developed and maintained by the higher tiered Cyber security Officer currently the HQ AFRC wing Cyber Security Officer.

· Implement and enforce all AF cybersecurity policies, procedures, and countermeasures.

· Develop, review, endorse, and recommend actions by the Designated Approval Authority (DAO) or Authorizing Official (AO) of the system assessment documentation.

· Ensure approved procedures are in place for clearing, purging, declassifying, and releasing system memory, media, and output.

· Assist with quarantine process.

· Track and provide updates for negligent disclosure of classified information.

· Ensure proper protection or corrective measures have been taken when an incident or vulnerability has been discovered within a system.

· Approve access control requests for all NIRP and SIPR systems under HQ AFRC/A6BA responsibility.

· Ensure all AIS authorization documentation is current and accessible to properly authorized individuals.

· Maintain the repository for all system authorization documentation and modifications.

· Ensure that data ownership and responsibilities are established for each AIS, to include accountability, access rights, and special handling requirements.

· Ensure development and implementation of an information security education, training, and awareness program, to include attending, monitoring, and presenting local AIS security training.

· Evaluate threats and vulnerabilities to ascertain whether additional safeguards are needed.

· Ensure that system security requirements are addressed during all phases of the system life cycle.

· Assess changes in the system, its environment, and operational needs that could affect the authorization.

· Ensure configuration management (CM) for security-relevant AIS software, hardware, and firmware are properly documented.

· Ensure that system recovery processes are monitored to ensure that security features and procedures are properly restored.

· Participate in Configuration Control Board for changes to the systems, Incorporated into the agile process.

1.4.3.1.1. Qualifications Required to Perform These Services:

· Technical experience with the AF Cybersecurity Program.

· Technical experience with the RMF process.

· Complete DoD RMF Course within 180 days of being assigned to position.

1.4.3.2. SDMS Contract Information System Security Officer (ISSO) Services. The Contractor shall provide ISSO Services in support of HQ AFRC Portfolio systems and web applications owned by HQ AFRC/A6BA. The list of current systems with their type are identified on (Appendix 1). The ISSO shall be required to perform A&A actions in support of the SDMS contract ISSM which consist of the assisting with the creation and maintenance of the Risk Management Framework (RMF) package to achieve an Authority To Operate (ATO) for AFRC systems. These activities include complying with Standard Operating Procedures (SOPs) and Protocols. Conducting security scans and remediating finding found from security scans and performing continuous monitoring. In support of SDMS Contract ISSO services, Contractor shall provide the following services:

· Serve as HQ AFRC/A6B Information Systems Security Officer (ISSO) for NIPRNet and SIPRNet applications RMF ATO packages for A&A with artifacts, controls, system categorization.

· Assist with software renewal packages sent thru the Air Force Software and Application Certification Assessment (SACA) process and other approved process to add software to an Air Force approved products list.

· Implement cyber security paperwork (compliance) and Information Assurance (IA) controls.

· Perform software Authorization & Accreditation & other requirements associated with getting and maintaining application Authority to Operate for applications supported by the contract.

· Review current security policies and propose new security policies.

· Perform risk assessment associated with change management.

· Assist with transitioning ATO packages to a continuous ATO package.

· Perform continuous monitoring.

· Maintain cybersecurity baseline certification in accordance with appropriate LRPs set by DoD/Air Force specification.

· Met ISSO responsibilities outlined in LRPs set by DoD/Air Force specifications.

· Utilizing one or more Risk Management Framework implementation methods from DoD/Air Force specifications.

· Ability to obtain and maintain system accreditations through the System Development Life Cycle (SDLC).

· Assist in preparation and review documentation to include System Security Plans (SSPs), Risk Assessment Reports (RAR), Security Controls Traceability Matrix (SCTM), and other Assessment & Authorization (A&A) artifacts.

· Support efforts for vulnerability/risk assessment analysis to support Assessment & Authorization (A&A).

· Learn and conduct independent scans of the application, network and database with tools such as Nessus, DISA STIGS compliance check and SCAP (SCC), and other tools as designated by the government.

· Assist in the research and address information security issues as required and develop and maintain the Plan of Action and Milestones (POA&M) and support remediation activities.

· Provide continuous monitoring, security reviews, and technical inspections to enforce security policies, controls and procedures and mitigate identified vulnerabilities and weaknesses.

· Create processes and reports that will provide oversight into continuous monitoring and assessment activities for the system owner, Government ISSM and program management.

· Maintain inventory of system software, hardware, and firmware.

· Responsible for conducting system account management, training, tracking, and audit log reviews and recording and reporting results.

· Provide direction and guidance to other employees with regard to computer security issues via security education and awareness, conduct Information Systems Security briefings, participate in self-inspections and audits, and investigate security incidents.

1.4.3.2.1. Qualifications Required to Perform These Services:

· Technical experience with the AF Cybersecurity Program.

· Technical experience with the RMF process.

· Complete DoD RMF Course within 180 days of being assigned to position.

1.4.4. SDMS Contract Software Development Services

HQ AFRC/A6 requires software developers and testers to create business applications on NIPR/SIPR. The developers shall be required to develop business systems, device agnostic mobile applications, and APIs to capture, store, transform, and display data for customers supported by HQ AFRC/A6BA. The developers shall be required to assist with migrating HQ AFRC/A6BA business systems to the cloud. The contractor shall provide to the Government all developed, modified, or converted source modules, processes, programs, scripts, operating instructions, databases, system files, documentation, test files and test conditions used to develop each approved system or an approved systems change request.

1.4.4.1. SDMS Contract Software Development Support Service. HQ AFRC/A6 requires software developers to create business applications on NIPR/SIPR to capture data, automate business practices, and integrate business systems into larger AF business systems in support of HQ AFRC/A6BA customers. The developers shall be required to create reports that can be stand alone or used within a new or existing application using data from an existing HQ AFRC/A6BA data repository. The developers shall be required to create business applications, mobile applications, API’s, and analytic reports that support HQ AFRC/A6BA customers. They shall work in an Agile development team working closely with the costumer to meet the customer’s needs. They shall be required to release a product at the end of a Government determined Sprint timeframe that meets at least one customer requested need. They shall also be required to create automated test cases for the applications they develop. The developers shall be required to assist with migrating HQ AFRC/A6BA business systems to the cloud. The contractor shall provide to the Government all developed, modified, or converted source modules, processes, programs, scripts, operating instructions, databases, system files, documentation, test files and test conditions used to develop each approved system or an approved systems change request. In support of SDMS Contract Software Development Support Service, Contractor shall provide the following services:

· Research, design, implement, and manage software programs.

· Develop and test software to meet consumers' and clients' needs.

· Write and implement efficient code based on requirements.

· Monitor quality and performance of applications through testing and maintenance.

· Develop quality assurance procedures.

· Create automated unit and integration test cases.

· Test and evaluate new programs.

· Identifying areas for modification in existing programs and develop government approved modifications.

· Determine operational practicality.

· Provide ARCGis development support.

· Create analytic reports using data from the AFRC Data Environment and embed reports in applications.

· Train users.

· Troubleshooting, debugging, maintaining and improving existing software.

· Compile and assess user feedback to recommend improvements to existing software and software performance.

· Develop application programing interfaces (API’s) for web and mobile applications.

· Adapt existing web applications for mobile applications.

· Create device agnostic mobile applications.

· Working closely with other developers, UX designers, business and systems analysts, DBA’s, AGILE team, and customers.

· Collaborating with management, departments and customers to identify end-user requirements and specifications.

· Participate in Agile development meeting such as Sprint meeting, Backlog meeting, review, and retrospect.

· Develop technical documentation to guide future software development projects.

· Customer Meetings

· User stories

· Tasks breakdown

· Database diagrams

· Metadata

· Test cases

· User guide

· Create Product Roadmap in accordance with CDRL A007, Product Roadmap, DI-IPSC-82297, PWS Appendix C.

· Deploy software tools, processes, and metrics.

· Assist with Migrating existing Business systems to the cloud.

· Support DevSecOp initiatives.

1.4.4.1.1. Qualifications Required to Perform These Services:

· Significant technical experience with MS Visual Studio 2019.

· Significant technical experience with C#, Model View Controller.

· Knowledge of mobile application release.

· Familiarity with OOP design principles.

· Superior analytical skills with a good problem-solving attitude.

· Ability to perform in a team environment.

· Strong oral and written communication skills.

· Familiarity of Power BI and SAS Viya.

· Knowledge of DevOps and Agile methodology.

· Knowledge of Microsoft .NET Web API.

1.4.4.2. SDMS Contract Software Development Testing Service. Software tester(s) are required to conduct testing on all HQ AFRC/A6B on NIPR/SIPR applications before release. All test results shall be provided to the government for approval before production release of a system change request. In support of SDMS Contract Software Development Testing Service, Contractor shall provide the following services:

· Analyze and provide feedback on users stories for validity and feasibility.

· Collaborate closely with other team members.

· Create and execute automated functional test, end to end test, regression test, and acceptance test packages for applications.

· Conduct and manage user acceptance test process.

· Verify Developers automated Unit and Integration test results.

· Design and develop automation scripts when needed.

· Detect and track software defects and inconsistencies.

· Perform White/Black box code scans with latest government approved software.

· Contractor shall ensure prior environments testing has been completed and passed before allowing system change request release to next environment. Contractor shall obtain Government approval before change request can be approved on staging and production environments.

· Contractor shall provide test results to Government prior to approval of system change request to staging or production environments.

· Apply quality engineering principals throughout the Agile product lifecycle.

· Provide Software Vulnerability Assessment Reports (SVARS) in accordance with CDRL A008, Software Vulnerability Assessment Reports, DI-IPSC-82252A, PWS Appendix C.

1.4.4.2.1. Qualifications Required to Perform These Services:

· Significant test planning and documentation skills.

· Reporting skills.

· Knowledge with scripting.

· Working knowledge of test techniques.

· Working knowledge of programming.

· Knowledge of web and mobile technology.

· Knowledge of TFS/Azure DevOps.

· Ability to perform in a team environment.

· Strong oral and written communication skills.

· Knowledge of DevOps Agile methodology.

1.4.5. SDMS Contract Software Development Maintenance Services HQ AFRC/A6 requires software developers and testers to maintain business applications and legacy systems. The developers shall be required to maintain current and future business systems supported by HQ AFRC/A6BA on NIPR/SIPR see (Appendix 1) to the current DoD/Air Force specifications. They shall also be required to sustain and upgrade current legacy business systems supported by HQ AFRC/A6BA see (Appendix 1) to modern coding and security standards found in (Appendix 2). The developers shall be required to assist with migrating HQ AFRC/A6BA business systems to the cloud. The contractor shall provide to the Government all developed, modified, or converted source modules, processes, programs, scripts, operating instructions, databases, system files, documentation, test files and test conditions used to develop each approved system or an approved systems change request.

1.4.5.1. SDMS Contract Software Development Maintenance Support Service. AFRC A6 requires software developers to sustain current and future business systems, mobile application, API’s, and analytic reporting capabilities supported by HQ AFRC/A6BA on NIPR/SIPR see (Appendix 1) to the current DoD/Air Force specifications. They shall sustain the systems to their current functional and non-functional requirements. They shall work in an Agile development team breaking their releases into a Government determined Sprint timeframe. The contractor shall provide to the Government all developed, modified, or converted source modules, processes, programs, scripts, operating instructions, databases, system files, documentation, test files and test conditions used to develop each approved system or an approved systems change request. In support of SDMS Contract Software Development Maintenance Support Service, Contractor shall provide the following services:

· Research, design, implement, and manage software programs.

· Maintain and test software to ensure compliance of agreed upon functional and non-functional consumers' and clients' requirements.

· Write and implement efficient code based on requirements.

· Monitor quality and performance of applications through testing and maintenance.

· Develop quality assurance procedures.

· Maintain automated unit and integration test cases.

· Test and evaluate current programs.

· Identifying areas for modification in existing programs and develop government approved modifications.

· Determine operational practicality.

· Provide ARCGis development support.

· Maintain analytic reports using data from the AFRC Data Environment.

· Maintain existing systems.

· Maintain existing systems to current DoD/Air Force security specifications.

· Train users.

· Troubleshooting, debugging, maintaining and improving existing software.

· Compile and assess user feedback to recommend improvements to existing software and software performance.

· Maintain application programing interfaces (API’s) for web and mobile applications.

· Adapt existing web applications for mobile applications.

· Maintain device agnostic mobile applications.

· Working closely with other developers, UX designers, business and systems analysts, DBA’s, AGILE team, and customers.

· Collaborating with management, departments and customers to identify end-user requirements and specifications.

· Participate in Agile development meeting such as Sprint meeting, Backlog meeting, review, and retrospect.

· Develop technical documentation to guide future software development projects.

· Customer Meetings

· User stories

· Tasks breakdown

· Database diagrams

· Metadata

· Test cases

· User guide

· Create Product Roadmap in accordance with CDRL A007, Product Roadmap, DI-IPSC-82297, PWS Appendix C.

· Deploy software tools, processes, and metrics.

· Assist with Migrating existing Business systems to the cloud.

· Support DevSecOp initiatives.

1.4.5.1.1. Qualifications Required to Perform These Services:

· Significant technical experience with MS Visual Studio 2019.

· Significant technical experience with C#, Model View Controller.

· Knowledge of mobile application release.

· Familiarity with OOP design principles.

· Superior analytical skills with a good problem-solving attitude.

· Ability to perform in a team environment.

· Strong oral and written communication skills.

· Familiarity of Power BI and SAS Viya.

· Knowledge of DevOps and Agile methodology.

· Knowledge of Microsoft .NET Web API.

1.4.5.2. SDMS Contract Software Development Legacy System Upgrade Support Service. HQ AFRC/A6 requires software developers to upgrade current legacy business systems supported by HQ AFRC/A6BA see (Appendix 1) to modern coding and DoD/Air Force security specifications. They shall upgrade and migrate the systems to a government approved cloud or assist in integrating them into a government approved larger AF business system. They shall work in an Agile development team breaking their releases into a Government determined Sprint timeframe. The contractor shall provide to the Government all developed, modified, or converted source modules, processes, programs, scripts, operating instructions, databases, system files, documentation, test files and test conditions used to develop each approved system or an approved systems change request. In support of SDMS Contract Software Development Legacy System Upgrade Support Service, Contractor shall provide the following services:

· Research, design, implement, and manage software programs.

· Develop and test software to meet consumers' and clients' needs.

· Write and implement efficient code based on requirements.

· Monitor quality and performance of applications through testing and maintenance.

· Develop quality assurance procedures.

· Create automated unit and integration test cases.

· Test and evaluate current programs.

· Identifying areas for modification in existing programs and develop government approved modifications.

· Determine operational practicality.

· Provide ARCGis development support.

· Upgrade existing legacy systems to current DoD/Air Force coding specifications.

· Upgrade existing systems to current DoD/Air Force security specifications.

· Train users.

· Troubleshooting, debugging, maintaining and improving existing software.

· Compile and assess user feedback to recommend improvements to existing software and software performance.

· Upgrade application programing interfaces (API’s) for web and mobile applications to current DoD/Air Force coding and security specifications.

· Adapt existing web applications for mobile applications.

· Working closely with other developers, UX designers, business and systems analysts, DBA’s, AGILE team, and customers.

· Collaborating with management, departments and customers to identify end-user requirements and specifications.

· Participate in Agile development meeting such as Sprint meeting, Backlog meeting, review, and retrospect.

· Develop technical documentation to guide future software development projects.

· Customer Meetings

· User stories

· Tasks breakdown

· Database diagrams

· Metadata

· Test cases

· User guide

· Create Product Roadmap in accordance with CDRL A007, Product Roadmap, DI-IPSC-82297, PWS Appendix C.

· Deploy software tools, processes, and metrics.

· Assist with migrating legacy Business systems to the cloud.

· Support DevSecOp initiatives.

1.4.5.2.1. Qualifications Required to Perform These Services:

· Significant technical experience with MS Visual Studio 2019.

· Significant technical experience with C#, Model View Controller.

· Knowledge of mobile application release.

· Familiarity with OOP design principles.

· Superior analytical skills with a good problem-solving attitude.

· Ability to perform in a team environment.

· Strong oral and written communication skills.

· Familiarity of Power BI and SAS Viya.

· Knowledge of DevOps and Agile methodology.

· Knowledge of Microsoft .NET Web API.

1.4.5.3. SDMS Contract Software Development Maintenance Testing Service. Software tester(s) are required to conduct testing on all HQ AFRC/A6B NIPR/SIPR applications before release. All test results will be provided to the government for approval before production release of a system change request. In support of SDMS Contract Software Development Maintenance Testing Service, Contractor shall provide the following services:

· Analyze and provide feedback on users stories for validity and feasibility.

· Collaborate closely with other team members.

· Create and execute automated functional test, end to end test, regression test, and acceptance test packages for applications.

· Conduct and manage user acceptance test process.

· Verify Developers automated Unit and Integration test results.

· Design and develop automation scripts when needed.

· Detect and track software defects and inconsistencies.

· Perform White/Black box code scans with latest government approved software.

· Contractor shall ensure prior environments testing has been completed and passed DOD/AF security standards before allowing system change request release to next environment. Contractor shall obtain Government approval before change request can be approved on staging and production environments.

· Contractor shall provide test results to Government prior to approval of system change request to staging or production environments.

· Apply quality engineering principals throughout the Agile product lifecycle.

· Provide Software Vulnerability Assessment Reports (SVARS) in accordance with CDRL A008, Software Vulnerability Assessment Reports, DI-IPSC-82252A, PWS Appendix C.

1.4.5.3.1. Qualifications Required to Perform These Services:

· Significant test planning and documentation skills.

· Reporting skills.

· Knowledge with scripting.

· Working knowledge of test techniques.

· Working knowledge of programming.

· Knowledge of web and mobile technology.

· Knowledge of TFS/Azure DevOps.

· Ability to perform in a team environment.

· Strong oral and written communication skills.

· Knowledge of DevOps Agile methodology.

1.4.6. SDMS Contract Application Environment Support Service

HQ AFRC/A6 requires administration support for its server and database environments that support HQ AFRC/A6BA NIPR/SIPR business systems and applications. These environments include a development, testing, quality assurance, staging, and production environment for its business systems and web applications. The environments shall be maintained to Department of Defense (DoD), Defense Information Systems Agency (DISA), Air Force (AF), and AFRC standards.

1.4.6.1. SDMS Contract Server Administration Support Service. HQ AFRC/A6 requires server administration support to include but not limited to business systems, applications, software, database servers, testing environments, quality assurance environments, development environments, and production environments on NIPR/SIPR in support of HQ AFRC/A6BA. See (Appendix 1) for list of current business systems, application, and software. Server administrators shall maintain server security requirements within DoD, DISA, AF, and AFRC standards. In support of SDMS contract server administration support service, Contractor shall provide the following services:

· Coordinate with HQ/base Service Desk/Communications Focal Point (CFP) for issue resolution.

· Contact the appropriate Government and/or commercial agencies to resolve maintenance problems.

· Ensure backups, restores, and monitoring are being accomplished in accordance with applicable procedures.

· Coordinate, document, test, validate, and deploy new technology provided by Government.

· Utilize Remedy, ServiceNow or similar ITSM tool to document, coordinate, route, resolve, and close user issues and server/services issues.

· Conduct/assist with installs/configurations of the hardware and software for appropriate servers to DoD/Air Force specifications.

· Support A&A activities for all common services.

· Determine and mitigate AFNet/JIE-caused issues to AFRC missions.

· Remediate vulnerabilities on assigned hardware and software.

· Maintain service (Upgrades, patching to include server OS updates, security patches, and any other Government required patches).

· Troubleshoot service and network issues impacting the technical environment with Government personnel.

· Ensure NIPR/SIPR CAT vulnerabilities for each assigned server does not exceed AFRC, AF, DISA, or DoD vulnerability thresholds; must be <2.49 vulnerabilities per each assigned server.

· Server administrators shall implement AF Maintenance Tasking Orders (MTOs), TCNOs, and CCOs by established deadlines with ninety-five percent (95%) compliance for MTOs; one hundred percent (100%) compliance for TCNOs and CCOs. All non-compliant MTOs will be corrected within five (5) business days.

· Provide configuration management services for the Air Reserve Netcentric Framework (ARCNet), AFRC data environment, and WebApps development, testing and production environments.

· Provide user account maintenance and support.

· Comply with CCRI evaluation criteria.

· Generate reports for CCRI data calls

· Submit STIG compliance checklists

· Computer Network Defense (CND) directives compliance reporting

· Coordinates reports and scan findings with ISSM/ISSO

· Assist with environment migration to the cloud and sustainment in the cloud.

· Minimize business systems, applications, services, and systems unscheduled downtime; 99% availability for the month with no more than seven (7) hours of downtime within contractor’s control.

· Provides configuration control documentation of system changes; on-time delivery at one hundred percent (100%) level (monthly).

1.4.6.1.1. Qualifications Required to Perform These Services:

· Technical experience utilizing PowerShell or government approved tool.

· Technical experience with Microsoft Windows Server 2012R2 or newer.

· Significant experience as a MS server administrator and Linux server administration.

1.4.6.2. SDMS Contract Database Administration Support Service. HQ AFRC/A6 requires database administrator(s) to support HQ AFRC/A6BA NIPR/SIPR business systems and applications. The systems receive data from flat files, the HQ AFRC/A6 centralized data repository, and other AF system connection. The Contract shall support HQ AFRC A6B efforts to centralize AFRC data. In support of SDMS Contract Database Administration Support Service, Contractor shall provide the following services:

· Plan, design, enforce and audit security controls, policies and procedures which safeguard the integrity of and access to data.

· Ensure security controls meet all legal, contractual, regulatory and business requirements and contractual agreements.

· Ensure data is accessible and recoverable.

· Create and maintain data dictionary.

· Work with Server Management Support to comply with CCRI evaluation criteria [e.g., STIGs and Computer Network Defense (CND) Directives].

· Install and maintain databases for COTS products and designs and implements custom application databases to support a highly secure environment.

· Support the development, test and production environments.

· Identify performance improvement areas for databases.

· Write procedural documents (How-To) to document the installation of products and maintenance procedures.

· Support engineers and developers in troubleshooting issues with their products and custom code.

· Work with project personnel to resolve schedule problems and ensure developed applications and systems are transitioned to production in a timely manner.

· Identify and manage dependencies with other systems and elements of the IT infrastructure.

· Provide tools and documents to AFRC tiered support work centers to aid in customer support, trouble shooting and determining the severity of issues.

· Provide AFRC tiered support work centers with information for customer training.

· Research new technologies to automate process.

· Minimize business systems, applications, services, and systems unscheduled downtime; 99% availability for the month with no more than seven (7) hours of downtime within contractor’s control.

1.4.6.2.1. Qualifications Required to Perform These Services:

· Technical experience working in a database environment.

· Technical experience utilizing PowerShell.

· Experience with Microsoft Windows Server 2012R2 or newer.

· Experience with database administration with emphasis in MySQL, MS SQL Server, and/or Oracle 11g.

1.4.7. SDMS Contract Data Environment Support Service

HQ AFRC/A6 requires administration support for its server and database environments that support the HQ AFRC/A6B centralized data and analytic environment. This environment includes a development, testing, quality assurance, staging, and production environment for its business systems and web applications. The environments shall be maintained to Department of Defense (DoD), Defense Information Systems Agency (DISA), Air Force (AF), and AFRC standards.

1.4.7.1. SDMS Contract Data Environment Server Administration Support Service. HQ AFRC/A6 requires server administration support to include but not limited to business systems, applications, software, database servers, testing environments, quality assurance environments, development environments, data environment, production environments, and data environment in support of HQ AFRC/A6BA. See (Appendix 1) for list of current business systems, application, and software. Server administrators shall maintain server security requirements within Department of Defense (DoD), Defense Information Systems Agency (DISA), Air Force (AF), and AFRC requirements. In support of SDMS Contract Data Environment Server Administration Support Service, Contractor shall provide the following services:

· Coordinate with HQ/base Service Desk/Communications Focal Point (CFP) for issue resolution.

· Contact the appropriate Government and/or commercial agencies to resolve maintenance problems.

· Ensure backups, restores, and monitoring are being accomplished in accordance with applicable procedures.

· Coordinate, document, test, validate, and deploy new technology provided by Government.

· Utilize Remedy, ServiceNow or similar ITSM tool to document, coordinate, route, resolve, and close user issues and server/services issues.

· Conduct/assist with installs/configurations of the hardware and software for appropriate servers to DoD/Air Force specifications.

· Support A&A activities for all common services.

· Determine and mitigate AFNet/JIE-caused issues to AFRC missions.

· Remediate vulnerabilities on assigned hardware and software.

· Maintain service (Upgrades, patching to include server OS updates, security patches, and any other Government required patches).

· Troubleshoot service and network issues impacting the technical environment with Government personnel.

· Ensure NIPR/SIPR CAT vulnerabilities for each assigned server does not exceed AFRC, AF, DISA, or DoD vulnerability thresholds; must be <2.49 vulnerabilities per each assigned server.

· Server administrators shall implement AF Maintenance Tasking Orders (MTOs), TCNOs, and CCOs by established deadlines with ninety-five percent (95%) compliance for MTOs; one hundred percent (100%) compliance for TCNOs and CCOs. All non-compliant MTOs will be corrected within five (5) business days.

· Provide user account maintenance and support.

· Provide ARCGis sustainment, including software updates and software administration.

· Comply with CCRI evaluation criteria.

· Generate reports for CCRI data calls.

· Submit STIG compliance checklists.

· Computer Network Defense (CND) directives compliance reporting.

· Coordinates reports and scan findings with ISSM/ISSO.

· Assist with environment migration to the cloud and sustainment in the cloud.

· Minimize business systems, applications, services, and systems unscheduled downtime; 99% availability for the month with no more than seven (7) hours of downtime within contractor’s control.

· Provides configuration control documentation of system changes; on-time delivery at one hundred percent (100%) level (monthly).

1.4.7.1.1. Qualifications Required to Perform These Services:

· Technical experience utilizing PowerShell or government approved tool.

· Technical experience with Microsoft Windows Server 2016 or newer.

· Significant experience as a MS server administrator and Linux server administration.

1.4.7.2. SDMS Contract Data Environment Database Administration Support Service. HQ AFRC requires database administrator(s) to support AFRC’s centralized NIPR and SIPR data and analytic environment maintained by HQ AFRC/A6B. The AFRC centralized data and analytic solution provides for data integrity, eliminating null data, errors, formatting discrepancies, and redundant data. The solution ensures that data is cleansed, transformed to a useable format, catalogued, and made available for use. It integrates seamlessly with the AFRC Enterprise Service Bus (ESB) using SOA industry standards. The AFRC centralized data and analytic environment is capable of consuming data from AFRC unique, AF, and DoD systems. The AFRC centralized data and analytic environment utilizes an Extract Translate and Load (ETL) capability to consume data from existing database technologies such as Oracle, SQL, Excel spreadsheets, etc., and transform and store data in a consistent format. In addition to supporting analytics, the data solution also creates and maintains SOA services that share data with AFRC unique, AF, and DoD systems. In support of SDMS Contract Data Environment Database Administration Support Service, Contractor shall provide the following services:

· Creates ETL scripts for new service capabilities.

· Sustains ETL for all current authoritative data sources.

· Designs, documents and implements new schemas.

· Provides data quality metrics.

· Data ingest metrics.

· Administers all operational data stores (ODS).

· Administers all databases.

· Performs database tuning and configuration.

· Assist developers with data exposure services.

· Comply with CCRI evaluation criteria.

· Assist Server Administrator with Database STIGS.

· Submit STIG compliance checklists.

· Minimize business systems, applications, services, and systems unscheduled downtime; 99% availability for the month with no more than seven (7) hours of downtime within contractor’s control.

· Research new technology to automate ETL processes.

· Plan, design, enforce and audit security controls, policies and procedures which safeguard the integrity of and access to data.

· Ensure security controls meet all legal, contractual, regulatory and business requirements and contractual agreements.

· Ensure data is accessible and recoverable.

· Create and maintain data dictionary.

· Work with Server Management Support to comply with CCRI evaluation criteria [e.g., STIGs and Computer Network Defense (CND) Directives].

· Install and maintain databases for COTS products and designs and implements custom application databases to support a highly secure environment.

· Support the development, test and production environments.

· Identify performance improvement areas…